# Flask example
from flask import Flask, request, jsonify
import hmac, hashlib
app = Flask(__name__)
WEBHOOK_SECRET = "whsec_xxxxxxxxxxxxx"
@app.route("/webhooks/staging", methods=["POST"])
def handle_webhook():
# Verify signature
signature = request.headers.get("X-Webhook-Signature", "")
expected = hmac.new(
WEBHOOK_SECRET.encode(),
request.data,
hashlib.sha256
).hexdigest()
if not hmac.compare_digest(f"sha256={expected}", signature):
return jsonify({"error": "Invalid signature"}), 401
event = request.json
event_type = event["event"]
if event_type == "staging.complete":
image_url = event["data"]["image_url"]
claim_code = event["data"]["claim_code"]
# Send to your CRM, notify the agent, etc.
print(f"Staging complete: {claim_code}")
elif event_type == "claim.redeemed":
print(f"Agent claimed: {event['data']['claim_code']}")
elif event_type == "credits.low":
print(f"Low credits: {event['data']['current_balance']}")
return jsonify({"received": True}), 200
